Assigning to concern owner from Predator results --
The result is a list of CL's that change the crashed files. 

Author: dan sinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/61b2fc718910a5ab2a75ec5026b239ff33bccfdc
Time: Wed Mar 23 19:21:44 2016 -0400
The CL last changed line 58 of file cpdf_simplefont.cpp, which is stack frame 6.


Author: Werner Lemberg
Project: chromium-freetype
Changelist: https://chromium.googlesource.com/chromium/src/third_party/freetype2.git/+/283c8ed817a645dfd08b5e1fe78a34bd91140389
Time: Sat Apr 13 13:02:31 2013
The CL last changed line 197 of file cf2blues.c, which is stack frame 0. 

@dsinclair: Assigning to you, kindly take a look into it. Please help us to find an owner if not with respect to your change.

Thanks.!

Another freetype integer overflow.

Integer overflows are now tested (again) with google's fuzzer; I've fixed a bunch of them over the last few days, so please test whether you still have problems.

Note that I don't have access rights to get the above test case.

npm@ can you take a look to see if this is fixed if we build against the latest freetype?

This is fixed on Freetype TOT so it should be fixed later, when chromium and PDFium update.

ClusterFuzz has detected this issue as fixed in range 483442:483471.

Detailed report: https://clusterfuzz.com/testcase?key=6157393531764736

Fuzzer: ochang_search_index_mutator
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  cf2_blues_init
  cf2_font_setup
  cf2_getGlyphOutline
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=469963:470445
Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=483442:483471

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6157393531764736


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Thanks to Ben who took care of the FreeType roll in https://chromium-review.googlesource.com/c/550379/

This also needs to be rolled into the PDFium DEPs file. This just happens to be fixed because the fuzzer is built in Chrome.

We have made a bunch of changes on ClusterFuzz side, so resetting ClusterFuzz-Wrong label.